Error 1 in loading CA ControlMinder kernel
search cancel

Error 1 in loading CA ControlMinder kernel

book

Article ID: 100107

calendar_today

Updated On:

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM) CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

CA PIM 12.8 SP1 was installed on an OEL Kernel, but the SEOS_syscall was not loaded when the seload command was run.

[root@demo-server bin]# ./seload 
CA ControlMinder seload v12.81.0.3073 - Loader Utility 
Copyright (c) 2013 CA. All rights reserved. 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -pre 
SEOS_load: "Oracle Linux Server 6.9" Kernel: 4.1.12-94.7.8.el6uek.x86_64 
SEOS_load: /opt/CA/AccessControl/bin/SEOS_syscall.60-4112-9478-UEKX86_64.MP.ko 
CA ControlMinder seversion v12.81.0.3073 - Display module's version 

Copyright (c) 2013 CA. All rights reserved. 

Running under: Linux 

File name: /opt/CA/AccessControl/bin/SEOS_syscall 
Version : 12.81.0.3073 
Created : Jan 25 2018 02:24:31 
OS info : Kernel: 4.1.12-94.7.8.el6uek _LINUX60-41 
SHA1 : 6263D826B1F693A736F777B6D9CDC1C187536955 
MD5 : 84E0D52BBDB8F8F302D817937DFBECB1 
SEOS_load: dmesg: 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -post 
SEOS_load: SEOS_syscall WASN'T loaded 

In /var/log/messages, the following error messages occur at the time seload was called.

May 14 09:47:24 demo-server seload[390316]: Loading CA ControlMinder kernel extension. 
May 14 09:47:24 demo-server seload[390316]: Error 1 in loading CA ControlMinder kernel





 

Environment

Privileged Identity Manager 12.8 SP1
OEL or RHEL kernels with UEFI Secure Boot
 

Cause

UEFI Secure Boot was enabled in this Oracle Exadata machine, which is not supported for PIM endpoints.

Resolution

UEFI Secure Boot should be disabled on the server in order for the PIM kernel to be loaded successfully.

Additional Information

There are some PAM Server Control endpoint versions which can support UEFI Secure Boot, refer to the PAMSC Compatibility Matrix to determine which version is compatible with the OS kernel.